CVE-2021-20654 | BDVDB-2026-148953 Detail

Wekan TeamWekan

Description#

Wekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple stored cross-site scripting. This is named 'Fieldbleed' in the vendor's site.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wekan.github.io/hall-of-fame/fieldbleed/
https://jvn.jp/en/jp/JVN80785288/

Exploit#

No public exploit known

History#

Version 12021-02-10Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.